Description
2025年7月，泛微官方发布v10.76补丁修复了一处 SQL注入漏洞，经分析，攻击者可利用此漏洞获取服务器敏感信息，如结合其他后台漏洞可导致代码执行，最终造成服务器沦陷。
泛微e-cology 前台SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-/blob/master/%E6%B3%9B%E5%BE%AE%20e-cology%20OA%20%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://www.aliyun.com/product/news/15034
https://cloud.tencent.com/developer/article/2443506
https://www.cnblogs.com/ffx1/p/12653555.html
https://bbs.chaitin.cn/topic/629
https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/01-CMS%E6%BC%8F%E6%B4%9E/%E6%B3%9B%E5%BE%AE/%E6%B3%9B%E5%BE%AE%20e-cology%20OA%20%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/
https://zhi.oscs1024.com/category/%E6%BC%8F%E6%B4%9E/page/8
https://blog.csdn.net/weixin_43981050/article/details/131679936
https://jx-yanxin.com/h-nd-11.html
https://wxb.fzu.edu.cn/info/1015/1885.htm